CVE-2026-118697

CRITICAL 9.0CVE-2026-118697 · Published 30/10/2026 · updated 02/11/2026

In short

CVE-2026-118697 is a CRITICAL (CVSS 9.0) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover before 2026.3 and 2026.2.5, the jetbrainsd daemon trusted compromised intermediate certificates

References

blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides
bugzilla.mozilla.org/show_bug.cgi
emudhra.com/en/post/certificate-security-incident
jetbrains.com/privacy-security/issues-fixed

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free